CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2024-26260
Critical (9.8) in hgiga. EPSS 1.6% chance of exploitation in the next 30 days.
The functionality for synchronization in HGiga OAKlouds' certain moudules has an OS Command Injection vulnerability, allowing remote attackers to inject system commands within specific request parameters. This enables the execution of arbitrary code on the remote server without permission.
Severity
- EPSS
- 1.6% chance of exploitation in the next 30 days; higher than 75% of CVEs (scores of 2026-10-31)
- CWE
- CWE-78
- Published
- Modified
- Record from
- the NVD, synced
Affected
- hgiga:oaklouds-organization-2.0
- hgiga:oaklouds-organization-3.0
- hgiga:oaklouds-webbase-2.0
- hgiga:oaklouds-webbase-3.0